Traffic Trace Info
DumpFile: 201111061400.dump
FileSize: 2978.87MB
Id: 201111061400
StartTime: Sun Nov 6 14:00:01 2011
EndTime: Sun Nov 6 14:15:00 2011
TotalTime: 899.30 seconds
TotalCapSize: -1765.91MB CapLen: 96 bytes
# of packets: 42517409 (25579.18MB)
AvgRate: 238.60Mbps stddev:60.42M
IP flow (unique src/dst pair) Information
# of flows: 2125852 (avg. 20.00 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.2% 2.7% 2.3% 1.8% 1.4% 1.3% 1.2% 1.0% 1.0% 1.0%
IP address Information
# of IPv4 addresses: 1552994
Top 10 bandwidth usage (bytes/total in %):
28.4% 12.3% 6.0% 5.3% 5.1% 4.3% 3.8% 3.3% 2.8% 2.5%
# of IPv6 addresses: 3540
Top 10 bandwidth usage (bytes/total in %):
25.2% 14.9% 12.7% 11.0% 10.3% 9.0% 8.3% 7.5% 7.5% 6.3%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201111061400.pktlen.png)
detailed numbers
[ 32- 63]: 14245691
[ 64- 127]: 9304621
[ 128- 255]: 1234151
[ 256- 511]: 602359
[ 512- 1023]: 615411
[ 1024- 2047]: 16515176
Protocol Breakdown
![[protocol breakdown chart]](201111061400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 42517409 (100.00%) 26821716530 (100.00%) 630.84
ip 42288147 ( 99.46%) 26656507629 ( 99.38%) 630.35
tcp 35979466 ( 84.62%) 24551916554 ( 91.54%) 682.39
http(s) 12339855 ( 29.02%) 17113597940 ( 63.81%) 1386.86
http(c) 6071830 ( 14.28%) 554956305 ( 2.07%) 91.40
squid 607329 ( 1.43%) 665365234 ( 2.48%) 1095.56
smtp 53647 ( 0.13%) 11292726 ( 0.04%) 210.50
nntp 6 ( 0.00%) 374 ( 0.00%) 62.33
ftp 43221 ( 0.10%) 31779390 ( 0.12%) 735.28
pop3 1044 ( 0.00%) 341177 ( 0.00%) 326.80
imap 1466 ( 0.00%) 189034 ( 0.00%) 128.95
telnet 3426 ( 0.01%) 285668 ( 0.00%) 83.38
ssh 106878 ( 0.25%) 16825922 ( 0.06%) 157.43
dns 37886 ( 0.09%) 2894366 ( 0.01%) 76.40
bgp 619 ( 0.00%) 96822 ( 0.00%) 156.42
napster 3237 ( 0.01%) 205807 ( 0.00%) 63.58
realaud 811 ( 0.00%) 50948 ( 0.00%) 62.82
rtsp 8359 ( 0.02%) 9267295 ( 0.03%) 1108.66
icecast 6084 ( 0.01%) 754232 ( 0.00%) 123.97
hotline 310 ( 0.00%) 19331 ( 0.00%) 62.36
other 16693452 ( 39.26%) 6143993623 ( 22.91%) 368.05
udp 3607312 ( 8.48%) 1239963166 ( 4.62%) 343.74
dns 361358 ( 0.85%) 82610262 ( 0.31%) 228.61
realaud 13 ( 0.00%) 1757 ( 0.00%) 135.15
halflif 1250 ( 0.00%) 76915 ( 0.00%) 61.53
starcra 204 ( 0.00%) 20765 ( 0.00%) 101.79
everque 540 ( 0.00%) 103600 ( 0.00%) 191.85
unreal 10 ( 0.00%) 1202 ( 0.00%) 120.20
quake 26 ( 0.00%) 3143 ( 0.00%) 120.88
cuseeme 4 ( 0.00%) 631 ( 0.00%) 157.75
other 3243675 ( 7.63%) 1157074254 ( 4.31%) 356.72
icmp 1671693 ( 3.93%) 162353294 ( 0.61%) 97.12
ipip 185 ( 0.00%) 19270 ( 0.00%) 104.16
ipsec 9188 ( 0.02%) 4577464 ( 0.02%) 498.20
ip6 1002424 ( 2.36%) 693063160 ( 2.58%) 691.39
other 17879 ( 0.04%) 4614721 ( 0.02%) 258.11
frag 1039 ( 0.00%) 870074 ( 0.00%) 837.41
ip6 229262 ( 0.54%) 165208901 ( 0.62%) 720.61
tcp6 143790 ( 0.34%) 128914410 ( 0.48%) 896.55
http(s) 8249 ( 0.02%) 9201461 ( 0.03%) 1115.46
http(c) 11664 ( 0.03%) 1131276 ( 0.00%) 96.99
smtp 59 ( 0.00%) 9020 ( 0.00%) 152.88
dns 605 ( 0.00%) 85825 ( 0.00%) 141.86
bgp 91 ( 0.00%) 15705 ( 0.00%) 172.58
other 123122 ( 0.29%) 118471123 ( 0.44%) 962.23
udp6 33913 ( 0.08%) 9414766 ( 0.04%) 277.62
dns 32108 ( 0.08%) 9175139 ( 0.03%) 285.76
realaud 2 ( 0.00%) 212 ( 0.00%) 106.00
halflif 1 ( 0.00%) 112 ( 0.00%) 112.00
unreal 1 ( 0.00%) 106 ( 0.00%) 106.00
quake 1 ( 0.00%) 105 ( 0.00%) 105.00
other 1800 ( 0.00%) 239092 ( 0.00%) 132.83
icmp6 17217 ( 0.04%) 2760742 ( 0.01%) 160.35
ip6 86 ( 0.00%) 11648 ( 0.00%) 135.44
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 34226 ( 0.08%) 24103255 ( 0.09%) 704.24
tcpdump file: 201111061400.dump.gz (1041.31 MB)